The breach hit core JavaScript libraries like chalk and strip-ansi, downloaded billions of times each week, raising alarms over the security of open-source software. Source: https://cointelegraph.com/news/npm-atta ... er_inbound